Stories from the world of hacking, cybersecurity, and rogue AI.
Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.
Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.
Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.
New episodes released at 7pm EST every Wednesday (midnight UK).
Graham Cluley
Sep 16, 2026Recent reviews on Apple Podcasts (5)
Love this show
… I do miss Carole, thought her voice was just perfect, like Grahams, for presenting the news. Hope she visits.
ႦυႦႦʅҽɠυɱ Ⴆʅυҽʂ ·
Great show for a lighthearted view toward cyber security.
Appreciate the light tone toward cyber security Graham and Carole (when she was here) have. Keeps it enjoyable and makes me instantly jump to it whenever it shows up on my feed.
anisali01 ·
Quality dropped
Missing Carole already. Tom had an uninformed take on quantum computing. He drops a bunch of random rants that are distracting and unhelpful trying to be funny but it doesn’t work (printer comments for example). Might be unsubscribing from this soon.
R1921aaaa ·
I learn a lot from this podcast
Thanks for a great podcast—great information and laughs! Thanks to Carole for the links to “Break” (break dancing) at the 2024 Paris Olympics!
USA Mknitter ·
Really?
Wow. I would like the time I wasted listening to half of an episode back please. I’m sure SS appeals to someone. I’m just not sure who that would be.
jd2020 ·
Episodes (487)

These researchers got drunk to hack an LG TV
Sep 16, 20261h 2m#485
Researchers wanted to test if LG's smart TVs come with any security risks - but their lawyers noticed a snag: the terms and conditions would forbid it. So they came up with a solution. They got plastered before setting u

How websites are tracking you with silence
Sep 9, 202645m#484
When a chap called Matt noticed his Bluetooth headphones wouldn't switch to his phone, he was surprised to realise the reason was a single AliExpress webpage sitting open in his browser - playing nothing at all, at zero

This AI helps thieves steal your iPhone
Sep 2, 202644m#483
You've had your iPhone stolen. A day later, you get a text from Apple saying they've found it, and a very helpful woman called Alice from Apple Support calls to walk you through recovering it. She's polite. She's profess

This hacker leaked GTA 6 - and launched their own cryptocurrency
Aug 26, 202650m#482
A hacker calling themselves "CYBERLEEK" has been leaking gameplay footage from GTA 6 ahead of its official reveal this week - but they're not asking Rockstar Games for a ransom. Instead, they've launched their own crypto

Never say this to a robot dog
Aug 19, 202645m#481
At Black Hat this month, a group of security researchers took a $9,000 robot dog, plugged Google's AI into its brain, and jailbroke it by telling it - with a completely straight face - that it was a Pokemon. What followe

This is the AI service you should never sign up to
Aug 12, 202645m#480
Would you like access to Anthropic's Claude at 90% off the normal price? All you have to do is redirect your traffic to a mysterious service called "Poison Claude". Only problem is that it's run by fraudsters... Meanwhil

How a fake police officer nearly stole Graham's cryptocurrency
Aug 5, 202659m#479
Graham gets a phone call from the police. Well, someone who sounds convincingly like the police. There's just one small problem: what they really want is the 24-word seed key to Graham's cryptocurrency wallet. Meanwhile,

This job interview could destroy your company
Jul 29, 202658m#478
You've been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment - with your webcam on, of course, so they can verify who you really are. Which is ironic, because the per

How 14 orders of chicken McNuggets helped nail a suspected Russian hacker
Jul 22, 202650m#477
A Russian intelligence-linked hacker is arrested in Thailand while enjoying a beach holiday - and the trail of evidence that nailed him to the Russian government includes 14 separate orders of chicken McNuggets. Meanwhil

Remote-control rickshaws and rogue book marketers
Jul 15, 202638m#476
An app has appeared in India that lets anyone with a smartphone stop a passing e-rickshaw dead in its tracks - no login, no passwords, no permissions needed. Meanwhile, Geoff - swimming in money and Lamborghinis, as all

JadePuffer - the AI that ran a ransomware attack all by itself
Jul 8, 202646m#475
A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware

Polymarket can predict the future. So how did it miss this hack?
Jul 1, 202642m#474
Polymarket has built an entire business on predicting the future. So how did it manage to spectacularly fail to predict its own hack? Plus, the Google engineer with a million-dollar secret, and the curious case of the ai

How a hacker could have Rickrolled the entire World Cup
Jun 24, 20261h 0m#473
A polite caller from your bank says there is a problem with your account. Don't worry - they'll send someone round to help. They'll even take your cards away to keep them safe. The scam has run rampant, until Dutch polic

AI gets hacked, and BitLocker gets bypassed
Jun 17, 20261h 12m#472
What if your AI coding assistant could be tricked into stealing your own company's secrets - by reading a single booby-trapped bug report? No phishing email. No malware. No password ever stolen. Just an AI doing exactly

This AI worm just rewrote its own rules
Jun 10, 202646m#471
Researchers at the University of Toronto have built a worm that thinks for itself. Using free off-the-shelf AI models it works out how to break into each new computer it encounters, and hijacks the powerful ones to host

This AI security flaw might be impossible to fix
Jun 3, 202657m#470
A website called "UK visa portal" has been quietly collecting passport scans, selfies, and personal data from thousands of travellers who thought they were applying through official channels. They weren't. And when a jou

What your Oura ring won't tell you
May 27, 202653m#469
CISA, the US government agency whose entire job is keeping America's critical infrastructure safe from hackers, has had a contractor publish dozens of plain-text credentials to a public GitHub profile. Meanwhile, your Ou

High-speed train hacks and homicidal lawnmowers
May 20, 202655m#468
A 23-year-old radio enthusiast spent £300 on a piece of kit from the internet, and used it to bring four packed high-speed trains to a screeching halt. His defence in court? Possibly the most creative excuse we've heard

How ShinyHunters hacked the world's biggest universities
May 13, 20261h 4m#467
Welcome to the largest educational data breach in history - affecting nearly 9,000 institutions, every Ivy League university, and 30 million students mid-finals. When Canvas's parent company refused to pay and announced

Meta sees everything, Copy Fail, and a deepfake gets hired
May 6, 20261h 2m#466
Meta's smart glasses promise privacy "designed for you" - but everything they record was being beamed off to workers in Nairobi to label by hand. When those workers blew the whistle, Meta sacked all 1,108 of them. Meanwh

This developer wanted to cheat at Roblox. It cost millions
Apr 29, 20261h 4m#465
A developer at an AI startup wanted to cheat at Roblox. They downloaded a dodgy script on their work laptop. That one decision triggered a cascade of failures that ended with a $2 million data breach affecting hundreds o

Rockstar got hacked. The data was junk. The secrets it revealed were not
Apr 22, 202651m#464
A company that ran anonymous tip lines for 35,000 American schools - handling reports of bullying, weapons, and self-harm - boasted on its website that it had suffered zero security breaches in over 20 years. A hacker ca

This AI company leaked its own code. It's also built something terrifying
Apr 15, 202650m#463
A hacking group claims to have broken into the flood defence system protecting Venice's Piazza San Marco - and is offering to sell access to whoever wants it. The asking price? A frankly insulting $600. Meanwhile, Anthro

LinkedIn is spying on you, and you agreed to nothing
Apr 8, 202641m#462
LinkedIn has been secretly scanning your browser for over 6,000 installed extensions — on every single click you make. It can tell if you're job hunting, what religion you are, and whether you have ADHD. And none of this

This man hid $400 million in a fishing rod. Then it vanished
Apr 1, 202645m#461
A cannabis-growing, beekeeping, gyrocopter-flying Irishman invested his drug money in Bitcoin back in 2011 - and now sits on a fortune worth $400 million. There's just one small problem: the access codes were tucked insi